I expect Microsoft provides their corporate customers with a solution that includes confidentiality and end-user control (i.e., IT department control) of machin

I expect Microsoft provides their corporate customers with a solution that includes confidentiality and end-user control (i.e., IT department control) of machines. Many business users would not and could not share this info with Microsoft. Instead of trying to discover and disable each confidentiality threat in the consumer version, the best solution probably is to obtain of that corporate version. Likely you also need to read up on how to configure those featues on TechNet, but generally Microsoft's documentation is complete (if sometimes difficult).